This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS209693.roa
File: AS209693.roa (raw, json)
Hash identifier: eMjkR/iobnaGeMjHA7ZqU9O+iOJ0YLKpYegDxlnXtoc=
Subject key identifier: 16:9D:A3:59:A1:06:B7:45:61:D1:6B:27:04:CA:F6:9A:F0:F7:90:46
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 377909582558D2A1E68BB5AA1144F0C91044424B
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS209693.roa
Signing time: Thu 04 Dec 2025 18:59:57 +0000
ROA not before: Thu 04 Dec 2025 18:54:57 +0000
ROA not after: Thu 03 Dec 2026 18:59:57 +0000
asID: 209693
IP address blocks: 2a09:54c6:5000::/36 maxlen: 36
2a09:54c6:5000::/48 maxlen: 48
2a0f:6284:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:79:09:58:25:58:d2:a1:e6:8b:b5:aa:11:44:f0:c9:10:44:42:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Dec 4 18:54:57 2025 GMT
Not After : Dec 3 18:59:57 2026 GMT
Subject: CN=169DA359A106B74561D16B2704CAF69AF0F79046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:04:6a:87:b5:d6:7b:8f:51:29:13:ea:7f:8c:
c7:61:f2:9e:2b:85:21:2b:68:ac:ae:ca:93:dc:9b:
20:4d:d6:1e:46:37:26:f6:f5:e3:fe:6a:c9:6c:85:
3f:60:85:cb:9f:87:b1:d7:89:50:68:f7:ef:eb:84:
e1:f0:36:df:c3:c3:e1:ce:ec:1e:cc:6b:82:30:ef:
9f:5d:f8:0a:d2:b1:ba:d2:cf:72:61:5d:a3:a5:73:
ba:d3:69:25:40:7a:08:cc:76:63:d2:a0:0e:d2:f9:
be:2c:5c:5a:36:7d:ce:49:17:ef:8a:8d:a0:75:5e:
ed:04:28:64:c1:e4:8b:f6:f2:7e:f7:71:98:d7:5d:
c1:d2:c0:a8:6d:2e:44:23:c1:20:02:55:84:a7:be:
80:7d:d3:2c:c1:f7:3d:64:f4:0c:d4:c3:88:fb:cb:
90:09:32:75:99:cb:89:7a:1a:d2:ef:ba:43:68:c3:
06:58:dd:6d:ea:eb:e9:23:87:a4:47:04:34:8a:21:
2a:7a:a7:13:c7:cb:1d:1d:91:df:a6:a2:38:d3:4e:
f8:dc:d9:1f:99:4e:77:46:2b:2e:38:62:ea:e6:1e:
e0:92:1e:0c:5c:bd:78:a3:a4:21:03:27:d4:16:0e:
c2:db:e1:c5:a7:88:a6:92:2e:f3:92:4f:d2:de:64:
b2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9D:A3:59:A1:06:B7:45:61:D1:6B:27:04:CA:F6:9A:F0:F7:90:46
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS209693.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:5000::/36
2a0f:6284:c000::/34
Signature Algorithm: sha256WithRSAEncryption
58:60:4d:a7:a9:b9:70:b1:21:7a:8b:90:9f:a3:45:99:9d:1d:
11:cf:5b:a3:2c:6e:15:cd:8e:f1:29:4d:cb:c1:cd:22:80:9f:
2b:91:93:02:0e:15:26:0c:89:22:f5:3d:52:e2:8d:c2:a3:3c:
05:4b:e7:1b:e7:f4:c4:78:6c:f1:da:8d:b8:74:d1:32:5f:32:
97:22:b1:08:77:2f:37:17:70:72:cb:dc:d5:1f:eb:2b:fe:ea:
ef:9c:3e:6b:68:f1:43:9b:ad:66:78:15:a9:06:e1:6d:03:0c:
f1:6b:59:68:9b:53:6a:ca:97:bd:53:d8:80:b1:90:b3:31:a7:
88:c8:0a:54:dc:2e:4d:13:dd:11:5e:25:32:49:4f:53:25:a0:
fa:0c:f5:0b:60:04:f7:2b:09:77:5e:09:58:5f:4c:75:8a:d2:
36:72:e7:7c:83:bd:c1:c8:38:43:e8:bb:ef:e4:2d:15:c8:39:
13:67:a5:49:65:6f:3c:20:75:3e:00:a6:39:24:ca:c0:20:68:
1c:5d:d9:a6:e3:70:8f:fb:68:98:3b:45:b6:1c:d4:64:83:02:
36:bc:0c:d4:d3:80:2a:68:79:db:f1:6e:ad:f8:32:15:8e:0c:
75:26:67:b1:81:65:72:62:10:6b:b8:97:88:24:41:02:09:2f:
10:22:72:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:29:31 2025 by rpki-client